Quantum-Secure Bitcoin
Technical guides to quantum-secure Bitcoin: how post-quantum signatures, addresses, mining, and migration work on a live network.
What changing Bitcoin's signature algorithm actually requires: opcodes, size impacts, wallet changes, and running both schemes in one block.
Why quantum-resistant transactions need bigger blocks, and how every parameter change cascades through emission schedules, witness economics, chain growth, and node viability.
Taproot exposes the public key on-chain, so a quantum-resistant script in a P2TR container is false security. BIP-360's P2MR removes the key path entirely.
A 1,312-byte Dilithium public key never lands in an address. Hash160 holds ECDSA and legacy Dilithium addresses to 20 bytes; P2MR commits to a 32-byte Merkle root.
SHA-256 proof-of-work is unchanged, so existing ASICs work. The hard parts are paying miners in 15x-larger transactions and bootstrapping without stealth.